AMENDMENTS TO CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently Amended) A method comprising: 

reading from a software module " \ \ n \ o a set of keys associated with 
a trusted source ^ o ^^v. ^ . ^ ^ ^ ^ ^ ^v ^ \ \ 

determining whether a key is traceable to one of the n ^> " > set of keys; 

determining whether the key is identified in a list of compromised keys; and 

if the key is not identified as compromised and is traceable to one of the keys in 
the set ^ ^ assigning the key a trusted status. 

2. (Original) The method of claim 1 further comprising: 

verifying the integrity of a document comprising the key and the list of 
compromised keys. 

3. (Cancelled). 

4. (Currently Amended) The method of claim 1 in which determining whether the key is 
traceable to one of the ^ . set of keys further comprises: 

tracing the key through a certificate chain to one of the keys in the set of keys. 

5. (Original) The method of claim 1 further comprising: 

associating a document comprising the key and the set of keys with a software 
module comprising the set of keys using a hash of the software module in the 
document. 

6. (Original) The method of claim 2 in which the document is a manifest signed by the 
key. 
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7. (Original) Tlie nnetliod of claim 1 in which determining whether the key is identified in 
the list of compromised keys further comprises: 

searching the list of compromised keys for the key. 

8. (Currently Amended) A method comprising: 

producing a document comprising an identification of a software module and a 
list of compromised keys; and 

digitally signing the document using a key traceable to one kiy.pf a set of keys., 
0 - \ o ^ c> ^ "-v.^X"^ "~\ the software module. 

9. (Original) The method of claim 8 in which the identification of the software module 
comprises a hash value of the software module. 

10. (Currently Amended) The method of claim 8 in which the key is traceable to one of 
\ the set of keys ^ % v ^ \ the software module by way of a 

certificate chain. 

1 1 . (Original) The method of claim 8 further comprising: 

making the document available on a communication network by which computer 
systems comprising the software module may read the document. 

12. (Cancelled). 

1 3. (Currently Amended) A device comprising: 

a processor; 

a machine-readable storage medium coupled to the processor by way of a bus, 
the storage medium storing instructions which, when executed by the processor, cause 
the device to determine whether a key is traceable to one kev of a set of keys 
associated with a trusted source; 
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determine whether the key is identified in a list of compronnised l<eys; and 
if the l<ey is not identified as compronnised and is traceable to one of the 
keys in the set.of kevs, assign the key a trusted status. 

14. (Currently Amended) The device of claim 1 3 in which the instructions, when 
executed by the device, further cause the device to: 

verify the integrity of a document comprising the key and the list of ^"^'^ o 

keys. 

1 5. (Original) The device of claim 1 3 further comprising a software module comprising 
the list of keys. 

16. (Currently Amended) The device of claim 1 3 in which the instructions, when 
executed by the device, further cause the device to: 

trace the ns-w- key through a certificate chain to one of the keys in the set of keys. 

1 7. (Currently Amended) A device comprising: 

a processor; 

a machine-readable storage medium coupled to the processor by way of a bus, 
the storage medium storing instructions which, when executed by the processor, cause 
the device to: 

produce a document comprising an identification of a software module and 
a list of compromised keys; and 

digitally sign the document using a key traceable to one k§i,pf a set of 
keys .\ X 0 ^ ^ .-^ ^^ ^ ^ .\ ^ n .^x o\ the software module. 

18. (Original) The device of claim 17 in which the identification of the software module 
comprises a hash value of the software module. 
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1 9. (Currently Amended) The device of claim 1 7 in which the key is traceable to one of 
the >^ r 0 set of keys oo-x ^-^rv ^^vo i \ ^ the software module by way of a 
certificate chain. 

20. (Currently Amended) An article comprising a machine-readable medium having 
stored thereon instructions which, when executed by a processor, result in: 

reading from a software module s ^ \ \ ^ \ a set of keys associated with 
a trusted source o \ - ^ o ^ ^ ^ - . \o\ ^ :^.nv>v»,o. yi^- 

determining whether a key is traceable to one of the v - " set of keys; 

determining whether the key is identified in a list of compromised keys; and 

if the key is not identified as compromised and is traceable to one of r^^■^ t^^ ---v 
keys . 0 . \ \- ^ c>, assigning the key a trusted status. 

21 . (Currently Amended) The article of claim 20 in which the instructions, when 
executed by the processor, further result in: 

verifying the integrity of a document comprising the key and the list of 

^\ o "'^ c^o"^ keys. 

22. (Cancelled). 

23. (Previously Presented) The article of claim 20 in which the sequence of instructions, 
when executed by the processor, further result in: 

tracing the key through a certificate chain to one of the keys in the set of keys. 

24. (Currently Amended) An article comprising a machine-readable medium having 
stored thereon instructions which, when executed by a processor, result in: 

producing a document comprising an identification of a software module and a 
list of compromised keys; and 

digitally signing the document using a key traceable to one key.pf a set of keys., 
V v'--^ s> I .-^ s ^ ^^00 ^ ,\\i,.,,\,vv^.\^ the software module. 
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25. (Original) Tlie article of claim 24 in which the identification of the software module 
comprises a hash value of the software module. 

26. (Currently Amended) The article of claim 24 in which the key is traceable by way of 
a certificate chain to one of the ^ ^ ^ set of keys embedded in the software 
module. 
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